DDoS Attack in Progress.
nanog at headcandy.org
Sat Oct 11 09:22:36 CDT 2008
Beavis aka John Lopez:
I, for one, am glad you're interested in stopping the abuse at its source.
> why not ACL the source at your router or at whatever device is being
Mr. Lopez is contributing to the welfare of the net as a whole by addressing
the cause, rather than applying a bandage locally to lessen the symptom. I
sincerely hope your dismissive advice is not characteristic of Spamhaus
policy regarding abused hosts, considering the mission statement at the top
of your homepage.
On Sat, Oct 11, 2008 at 4:05 AM, Steve Linford <linford at spamhaus.org> wrote:
> On 10 Oct 2008, at 20:46, Beavis wrote:
> Hi All,
>> DoS attack in progress, any upstream info for these guys? their
>> phone number doesn't respond.
>> inetnum: 18.104.22.168 - 22.214.171.124
>> netname: TurkTelekom
>> descr: TT ADSL-alcatel static_ulus
>> country: tr
> The Spamhaus folk on this list have the address of TurkTelekom's chief
> security/abuse guy who would take take of this, but we would not be inclined
> to give his address to someone identifying themselves as "Beavis" with a
> gmail address. Can you elaborate on who you are, what's being DoSsed (a
> router, an http server, a mail server?), and whether you can ACL the source
> (since you know the source is in 126.96.36.199/17, why not ACL the source at
> your router or at whatever device is being DoSsed).
> Steve Linford
> The Spamhaus Project
More information about the NANOG